search

IdentityServer / IdentityServer3.AccessTokenValidation

OWIN Middleware to validate access tokens from IdentityServer3
Apache License 2.0
91 stars 149 forks source link

UseClaimsTransformation and ValidationResultCache #72

Closed danielwertheim closed 8 years ago

danielwertheim commented 8 years ago

Enabling using EnableValidationResultCache = true and also using UseClaimsTransformation, then UseClaimsTransformation is called always anyway. And the identity passed into it is not the previously returned identity, so there's no way to exit it. Hence if you lookup UserInfo in UseClaimsTransformation the identity server will be called... always and you are forced to implement your own caching.

brockallen commented 8 years ago

By design it's called on every request. And yes, you might need to implement caching.